CVE-2012-2269: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ownCloud before 3.0.3 allow remote attackers to inject arbitrary web script or HTML via 1 an arbitrary field to apps/contacts/ajax/addcard.php, 2 the parameter parameter to apps/contacts/ajax/addproperty.php, 3 the name parameter to...

CVE-2006-4941: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via 1 the choose parameter in files/index.php and 2 the sub parameter in doc/index.php...

CVE-2006-4784: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 doc/index.php or 2 files/index.php...